PHP Header() sent regardless of if statement in response to AngularJS Request

Question

This has been driving me up a wall.

I have a service in AngularJS that sends an Authorization header alongside any requests I make.

On the PHP end, I can successfully read that header, and test it. If the authentication token is not valid, I send out a 401 header.

$auth_header = $_SERVER['HTTP_AUTHORIZATION'];
$test = !valid($auth_header);
//var_dump($test);
if ($test) {
    header("HTTP/1.1 401 Unauthorized");
    exit;
}

The problem I run into is AngularJS keeps telling me that it is getting a 401, regardless of whether or not $test is true or false. I've tested by doing a vardump.

If I remove the header, it works just as I would expect: returning nothing if $test is false because of the exit, and returning the data I want if $test is true.

However, the moment I put in the header, the response ALWAYS comes back as 401.

It feels like the header is ignoring the if statement and I am completely baffled. I've searched and searched, and can't find any information on this problem, so I feel like it's something super simple that I am doing wrong. Help?

EDIT When I uncomment the var_dump($test), I get the following:

Bad Authorization Header:

bool(true)
Warning: Cannot modify header information - headers already sent by (output started at /home/test/public_html/test/api/sales.php:19) in /home/test/public_html/test/api/sales.php on line 23

Good Authorization Header:

bool(false) ["JSON Data"]

However, the moment I comment away the var_dump($test), I always get the following response from AngularJS.

XMLHttpRequest cannot load http://fakeurl.com/test/api/sales.php. Invalid HTTP status code 401

oke but as you see test is true so the if part works as it should — Poorya Mohammadi, May 29 '14 at 19:56
it does, but when the Header is in there it is sent regardless and I have no idea why. To make it even more confusing, if I replace the if statement with if(false){... it works as one would expect and doesn't send the header. — ScriptSilver, May 29 '14 at 20:34
it probably has something to do with valid() function . what does it return? — Poorya Mohammadi, May 29 '14 at 21:53

score 0 · Answer 1 · answered Jun 02 '14 at 06:43

0

I figured out the issue. The Athorization header wasn't applied when the OPTIONS request was sent out, causing it to come back as a 401.

answered Jun 02 '14 at 06:43

ScriptSilver

1
1

PHP Header() sent regardless of if statement in response to AngularJS Request

1 Answers1